Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35312e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35312e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          DQWbYwa9r97ucXwE9hlTYaBagooIOL0QAGNuz7Jy/FE=
Subject key identifier:   75:12:E0:AF:97:B4:90:3D:2C:71:AC:0E:A8:16:D6:05:14:52:B3:1B
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       3522DC7B9699B3DFBE7154A6365EB91B3B45E4BB
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35312e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 04 Feb 2025 18:26:05 +0000
ROA not before:           Tue 04 Feb 2025 18:21:05 +0000
ROA not after:            Tue 03 Feb 2026 18:26:05 +0000
asID:                     17147
IP address blocks:        163.247.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:22:dc:7b:96:99:b3:df:be:71:54:a6:36:5e:b9:1b:3b:45:e4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Feb  4 18:21:05 2025 GMT
            Not After : Feb  3 18:26:05 2026 GMT
        Subject: CN=7512E0AF97B4903D2C71AC0EA816D6051452B31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:bc:5a:ee:76:44:f8:e0:1e:d1:61:13:9f:
                    f2:7c:7f:14:1f:99:14:60:45:51:72:d7:e7:e2:ae:
                    81:c5:9d:65:bf:97:57:19:bb:fd:c8:ba:1c:f3:91:
                    96:a2:bd:2e:24:d7:2f:85:59:72:f9:fe:a8:dc:65:
                    44:56:c5:c4:15:c9:c1:9a:2b:5c:bb:c1:0b:ec:4e:
                    e0:b2:51:bc:21:3e:ed:2e:b0:a9:51:44:45:eb:bc:
                    a0:83:d7:3c:4b:aa:72:6a:ad:86:e5:67:d3:04:4f:
                    e0:13:c7:d9:3f:3c:2e:ee:85:2d:e5:00:a6:8c:c1:
                    33:7c:96:e8:bf:c3:0d:8c:95:01:7e:be:67:3e:72:
                    b7:69:89:87:41:2f:25:95:33:b4:5a:af:39:81:f6:
                    ad:52:8c:f3:76:24:72:b6:6f:b3:ea:1a:a6:81:bc:
                    dc:94:12:8a:7d:d5:ea:78:37:7e:2d:d2:bc:bd:86:
                    5c:b6:4f:d6:8d:49:03:c9:f8:48:12:eb:12:ca:44:
                    b2:9d:24:e8:d0:18:77:b8:23:1f:0d:f6:3e:0c:ae:
                    d2:a4:49:a4:bb:1d:9f:43:e6:db:e5:2b:4a:33:89:
                    de:33:37:24:86:80:95:b1:74:36:8b:5c:d0:f7:f2:
                    9f:76:fd:0a:6e:b2:6f:30:e4:e6:35:1f:e5:46:20:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:E0:AF:97:B4:90:3D:2C:71:AC:0E:A8:16:D6:05:14:52:B3:1B
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35312e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:75:fc:97:5f:8d:c4:cf:9d:6e:82:df:6a:77:24:97:9a:c9:
         f3:55:67:ae:b5:cd:be:eb:43:f8:8e:b9:16:f5:32:cb:4e:66:
         5e:13:03:36:f6:79:64:0b:50:19:a3:20:7c:0b:51:92:3c:bd:
         1e:02:dd:0a:ff:7c:3c:03:b4:36:8d:8a:7c:0e:07:15:98:f3:
         01:21:1c:ec:f0:05:02:13:03:a4:de:32:a3:28:e1:01:0d:4f:
         53:10:2c:09:62:eb:a8:70:50:99:ae:2a:4e:3b:5e:02:17:42:
         f4:af:30:32:9f:ba:96:e5:89:5a:ca:8c:71:0f:33:75:56:9a:
         64:58:e5:91:81:36:39:13:a3:f2:b8:63:bf:fc:d4:e5:50:14:
         ac:0a:e2:e7:19:b1:04:1a:45:31:fb:97:94:1a:d2:bb:7a:d2:
         7a:75:47:d7:74:2b:a8:40:d8:0c:9b:ba:ff:1a:c5:79:2a:cc:
         1d:87:d5:51:40:0a:50:0c:a6:b9:f3:f7:15:d7:62:19:8a:af:
         f7:9a:53:21:6d:f1:7b:b9:13:11:71:33:fd:60:ce:ae:ef:36:
         f8:82:5d:4e:86:ad:a3:d3:32:e9:e1:29:86:26:a1:cd:72:bf:
         e0:5c:5f:8c:e7:eb:f8:f8:70:c1:c3:f6:13:a5:85:ff:01:94:
         97:ae:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:11 2025 by rpki-client